The text 286972f8884f, as Debian 7 (Wheezy) shipped it.
convert Snort logs to firewall DLF
snort2dlf(1) on Linux now